CVE-2015-6251
CVE-2015-6251
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName (DN) entry in a certificate.
EPSS 19.0% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
gnutls28 Debian:12
- Affected ranges
- ECOSYSTEM: < 3.3.17-1
Update to 3.3.17-1
gnutls28 Debian:13
- Affected ranges
- ECOSYSTEM: < 3.3.17-1
Update to 3.3.17-1
gnutls28 Debian:14
- Affected ranges
- ECOSYSTEM: < 3.3.17-1
Update to 3.3.17-1
gnutls28 Ubuntu:16.04:LTS
- Affected ranges
- ECOSYSTEM: < 3.3.15-5ubuntu2
Update to 3.3.15-5ubuntu2
Original sources
- https://bugzilla.redhat.com/show_bug.cgi?id=1251902
- http://lists.opensuse.org/opensuse-updates/2015-09/msg00001.html
- http://www.securitytracker.com/id/1033226
- http://www.gnutls.org/security.html#GNUTLS-SA-2015-3
- http://www.openwall.com/lists/oss-security/2015/08/10/1
- http://www.securityfocus.com/bid/76267
- http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165286.html
- https://gitlab.com/gnutls/gnutls/commit/272854367efc130fbd4f1a51840d80c630214e12
- http://www.openwall.com/lists/oss-security/2015/08/17/6
- http://www.debian.org/security/2015/dsa-3334
- https://nvd.nist.gov/vuln/detail/CVE-2015-6251